$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/KRCYoJkBEwU0QDfRdCJlYOxW03c.roa File: KRCYoJkBEwU0QDfRdCJlYOxW03c.roa (raw, json) Hash identifier: gDF/Mu6bpv/JZS1EFK0KYw6yp6hX0mDFqSbAdZmzMyo= Subject key identifier: 29:10:98:A0:99:01:13:05:34:40:37:D1:74:22:65:60:EC:56:D3:77 Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Certificate serial: 0D59 Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/KRCYoJkBEwU0QDfRdCJlYOxW03c.roa Signing time: Mon 10 Feb 2025 13:44:46 +0000 ROA not before: Mon 10 Feb 2025 13:44:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2402:c340:cccc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3417 (0xd59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C Validity Not Before: Feb 10 13:44:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=291098A099011305344037D174226560EC56D377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:40:c4:d2:08:27:2a:09:d8:1d:d6:99:36: 84:5e:57:46:f8:9f:e2:70:69:bd:57:b3:03:88:cd: 12:92:bc:28:78:03:1b:ca:26:ac:7a:15:2f:d8:6b: fb:38:fb:c2:bf:5b:db:20:fd:d6:6c:58:74:3f:74: ac:5f:cf:64:12:d5:01:33:83:14:4b:66:39:d6:59: b3:a8:e3:d0:fa:7f:00:52:1c:f0:fb:8d:74:b1:11: 8d:8d:0a:2e:d5:7b:24:94:7f:fa:87:de:28:23:aa: 70:12:88:fa:b8:24:40:1f:d6:84:8e:73:ed:30:c8: 79:08:3b:33:5f:36:19:6d:4c:95:51:ef:de:ff:80: 87:9b:d1:0e:0e:db:b7:2a:e4:e1:5d:ff:c9:0a:05: aa:5e:51:35:b0:06:2c:27:32:85:aa:9f:69:4d:cd: 4b:d9:48:57:4d:4f:a7:1d:13:bf:ef:56:96:0b:b0: 6f:e6:01:c1:71:f5:b9:22:34:17:18:9c:23:ba:d0: 66:5e:27:e7:ef:66:d8:a9:fe:51:04:50:b9:bd:fe: 65:6e:8e:93:b7:8e:f3:21:19:56:0a:d7:ef:4b:12: 09:4a:5c:99:10:b4:0d:5a:79:f8:9e:df:ce:29:37: 0b:5e:a5:d7:a7:98:89:53:ab:31:bb:f0:98:73:90: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:10:98:A0:99:01:13:05:34:40:37:D1:74:22:65:60:EC:56:D3:77 X509v3 Authority Key Identifier: keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/KRCYoJkBEwU0QDfRdCJlYOxW03c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:c340:cccc::/48 Signature Algorithm: sha256WithRSAEncryption 6e:11:b7:01:a0:5a:f1:81:a1:c7:d0:d8:30:72:77:f1:d9:1d: 2c:bd:1d:27:00:7d:b5:4f:ea:13:e1:3a:7d:dd:cf:b7:24:6d: cc:0b:b9:44:9f:4c:25:75:7f:ac:08:24:97:db:dd:3d:a7:b1: 81:cb:3d:3a:c2:79:bc:ca:56:2b:e7:36:5f:13:ea:a4:44:5a: 89:1b:99:54:75:5c:e5:40:6a:db:ef:08:74:cd:4c:da:5f:b5: 5b:26:1f:55:e2:eb:3b:45:44:39:b3:61:aa:40:ca:de:b8:c4: f4:8c:c7:6b:bf:87:d2:34:84:96:6b:6f:e1:07:d6:04:35:ef: 89:30:d3:ea:30:6a:fb:58:91:d1:79:36:2f:b5:b7:53:8c:66: a5:6e:3e:66:60:c7:0d:8b:1f:d7:77:c8:80:3f:22:e4:f9:63: fc:39:9c:98:17:bd:a3:02:2c:25:65:7c:83:0d:ca:d1:38:be: 7d:8f:e1:ec:ae:d9:07:24:b3:04:b6:26:84:19:00:b7:8e:c4: 46:41:76:1c:5f:7b:d1:1f:e9:88:03:97:f7:7d:ee:ec:c7:70: 30:3d:1a:f4:b5:5f:a8:aa:2a:56:ff:42:44:6c:62:1e:2e:11: cc:3a:12:ab:9e:67:0d:a0:5e:4c:64:6f:2f:c3:52:87:94:41: 14:05:95:e7 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICDVkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1 NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yNTAyMTAx MzQ0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI5MTA5OEEwOTkwMTEz MDUzNDQwMzdEMTc0MjI2NTYwRUM1NkQzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNYEDE0ggnKgnYHdaZNoReV0b4n+Jwab1XswOIzRKSvCh4AxvK Jqx6FS/Ya/s4+8K/W9sg/dZsWHQ/dKxfz2QS1QEzgxRLZjnWWbOo49D6fwBSHPD7 jXSxEY2NCi7VeySUf/qH3igjqnASiPq4JEAf1oSOc+0wyHkIOzNfNhltTJVR797/ gIeb0Q4O27cq5OFd/8kKBapeUTWwBiwnMoWqn2lNzUvZSFdNT6cdE7/vVpYLsG/m AcFx9bkiNBcYnCO60GZeJ+fvZtip/lEEULm9/mVujpO3jvMhGVYK1+9LEglKXJkQ tA1aefie384pNwtepdenmIlTqzG78JhzkH1NAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUKRCYoJkBEwU0QDfRdCJlYOxW03cwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB 76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL0tSQ1lvSmtCRXdV MFFEZlJkQ0psWU94VzAzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAsNAzMwwDQYJKoZIhvcNAQELBQADggEBAG4RtwGgWvGBocfQ2DByd/HZ HSy9HScAfbVP6hPhOn3dz7ckbcwLuUSfTCV1f6wIJJfb3T2nsYHLPTrCebzKVivn Nl8T6qREWokbmVR1XOVAatvvCHTNTNpftVsmH1Xi6ztFRDmzYapAyt64xPSMx2u/ h9I0hJZrb+EH1gQ174kw0+owavtYkdF5Ni+1t1OMZqVuPmZgxw2LH9d3yIA/IuT5 Y/w5nJgXvaMCLCVlfIMNytE4vn2P4eyu2QckswS2JoQZALeOxEZBdhxfe9Ef6YgD l/d97uzHcDA9GvS1X6iqKlb/QkRsYh4uEcw6EqueZw2gXkxkby/DUoeUQRQFlec= -----END CERTIFICATE-----Generated at Sat Apr 12 20:22:31 2025 by rpki-client